AISVS

OWASP Artificial Intelligence Security Verification Standard AISVS Эта работа распространяется на условиях Creative Commons Attribution-ShareAlike 4.0 International License. Что такое AISVS? Artificial Intelligence Security Verification Standard AISVS — это создаваемый сообществом каталог...

cornucopia

Проект OWASP Cornucopia OWASP Cornucopia — это механизм в форме карточной игры, предназначенный для помощи командам разработчиков в выявлении требований безопасности в Agile, традиционных и формальных процессах разработки. Он не зависит от языка, платформы и технологии. Посетите:...

SecurityRAT

OWASP Security RAT Outil d'automatisation des exigences est un outil vous aidant à gérer les exigences de sécurité dans vos projets de développement agile. Le cas d'utilisation typique est : spécifier les paramètres de l'artefact logiciel que vous développez sur la base de ces informations, une...

ASVS

OWASP Стандарт верификации безопасности приложений Эта работа лицензирована по лицензии Международная лицензия Creative Commons Attribution-ShareAlike 4.0. 🎉🎉🎉 Добро пожаловать в версию 5.0 ASVS! 🎉🎉🎉 Выпущена в прямом эфире на Global AppSec EU Barcelona 2025! Введение Основная цель проекта OWASP...

should-i-trust

should-i-trust Summary should-i-trust is a tool to evaluate OSINT signals for a domain. Requirements should-i-trust requires API keys from the following sources: Censys.io - Free for for first 250/quries/month VirusTotal - Free GrayHatWarFare - Free with limited results Use Case You're part of a...

user-security-stories

Истории безопасности пользователей Этот репозиторий содержит сборник пользовательских историй безопасности и критериев приёмки. Истории безопасности пользователей Критерии приёмки безопасности Пожалуйста, делайте форки и добавляйте дополнительные истории безопасности и критерии приёмки, которые, ...

cornucopia v3.5.2

OWASP Cornucopia project OWASP Cornucopia is a mechanism in the form of a card game to assist software development teams Identify security requirements in Agile, conventional, and formal development processes. It is language, platform, and technology agnostic. Visit: https://cornucopia.owasp.org/...

Using LLMs to Elicit Security Requirements for Service-Oriented Cyber Ranges

Cyber ranges are complex environments comprising many interacting components and stakeholders with different security concerns. The Service-Oriented Cyber Range SOR is no exception, particularly when it comes to training scenarios targeting critical infrastructure. Security concerns are translate...

UBUNTU-CVE-2026-73501

kin-openapi is a Go project for handling OpenAPI files. Prior to 0.144.0, ValidationHandler.Load in openapi3filter/validationhandler.go silently replaces a nil AuthenticationFunc with NoopAuthenticationFunc, which returns nil without checking credentials. This substitution causes every OpenAPI...

From Backlog Items to Security Guidance: Towards Continuous Security Compliance

Continuous software engineering in regulated domains requires engineering teams to address security throughout the development lifecycle. Yet making security requirements explicit in backlog items is still problematic. Engineers must instead infer security relevance of backlog items from brief,...

A Bayesian Network Approach for Enhancing Security-Focused Decision Support Systems

The adoption and integration of heterogeneous stacks in most of today's open-source based networks brings clear benefits like interoperability and availability of advanced features. Yet, on the other hand the increasing number of interconnecting components and moving parts requires maintaining an...

EUVD-2026-4394

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pixelgrade Nova Blocks nova-blocks allows DOM-Based XSS.This issue affects Nova Blocks: from n/a through = 2.1.9...

EUVD-2026-4475

Langflow evalcustomcomponentcode Eval Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

EUVD-2026-3689

In the Linux kernel, the following vulnerability has been resolved: net/sched: schqfq: Fix NULL deref when deactivating inactive aggregate in qfqreset qfqclass-leafqdisc-q.qlen 0 does not imply that the class itself is active. Two qfqclass objects may point to the same leafqdisc. This happens whe...

EUVD-2026-2063

Dreamweaver Desktop versions 21.6 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could leverage this vulnerability to bypass security measures and execute unauthorized code...

EUVD-2026-1237

The iPaymu Payment Gateway for WooCommerce plugin for WordPress is vulnerable to Missing Authentication in all versions up to, and including, 2.0.2 via the 'checkipaymuresponse' function. This is due to the plugin not validating webhook request authenticity through signature verification or origi...

EUVD-2026-0077

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0137

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0233

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0397

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...